I might be late to the party, but I think this is still broken in 9.5 SP2. I did manage to get it working by creating a Patch provisioning entry and selecting Scan only with the Scan and Repair settings set to my OSD Patch to Baseline config. In my OSD Patch to Baseline config, I set it to scan the custom group: OSD Baseline - and I ticked the box right underneath that says "Immediately install all applicable items."
Image may be NSFW.
Clik here to view.
Image may be NSFW.
Clik here to view.
It seems to be working fine now.
